风沐云烟

[Mickey Jin @patch1t]

For those missing the talk,
Blog: https://t.co/XBvFMbsfi0
Slides: https://t.co/krDj6hHuXm

[风沐云烟 @binary_fmyy]

@gergely_kalman @theevilbit Congrats！

[Csaba Fitzl @theevilbit]

You can the slides for my today’s @bsidesbud talk (Apple Disk-O Party) on my site:

https://t.co/hLq264uEN6

[风沐云烟 @binary_fmyy]

Here is poc, but I can't construct the exploit for it, because of the strong mitigation of Apple XNU.
https://t.co/buah0kQpA6

[风沐云烟 @binary_fmyy]

CVE-2024-23208: it' is new code introduced on XNU with macOS 14.0, here it does not increase the refcount of group-pointer

[风沐云烟 @binary_fmyy]

@zhuowei No, it’s not in vm, I’m not sure if I can disclose the details about it, but it is a UAF vulnearbility caused by reference counting